WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
easy-elements
Published
2026-05-19
Title
Easy Elements for Elementor < 1.4.5 - Unauthenticated Privilege Escalation via easyel_handle_register
Slug
easy-elements
Published
2026-05-21
Title
Easy Elements for Elementor <= 1.4.5 - Unauthenticated Privilege Escalation via 'custom_meta' Parameter
Slug
easy-elements-hider
Published
2025-07-04
Title
Easy Elements Hider <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
easy-embed-for-youtube-wall
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-eu-cookie-law
Published
2025-01-16
Title
Easy EU Cookie law <= 1.3.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
easy-event-calendar
Published
2023-03-14
Title
Easy Event calendar <= 1.0 - Admin+ Stored XSS
Slug
easy-facebook-like-box
Published
2023-01-25
Title
Easy Social Box < 4.1.3 - Contributor+ Stored XSS via Shortcode
Slug
easy-facebook-likebox
Published
2021-08-16
Title
Easy Social Feed < 6.2.7 - Reflected Cross-Site Scripting (XSS)
Slug
easy-facebook-likebox
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
easy-facebook-likebox
Published
2021-08-12
Title
Easy Social Feed < 6.2.7 - Reflected Cross-Site Scripting
Slug
easy-facebook-likebox
Published
2022-12-27
Title
Easy Social Feed – Social Photos Gallery – Post Feed – Like Box < 6.4.0 - Contributor+ Stored XSS
Slug
easy-facebook-likebox
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
easy-facebook-likebox
Published
2024-01-02
Title
Easy Social Feed < 6.5.3 - Subscriber+ Settings Update
Slug
easy-facebook-likebox
Published
2024-03-12
Title
Easy Social Feed < 6.5.5 - Cross-Site Request Forgery
Slug
easy-facebook-likebox
Published
2024-03-12
Title
Easy Social Feed < 6.5.5 - Cross-Site Request Forgery
Slug
easy-facebook-likebox
Published
2024-03-12
Title
Easy Social Feed – Social Photos Gallery – Post Feed – Like Box < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
easy-facebook-likebox
Published
2024-03-27
Title
Easy Social Feed < 6.5.6 - Contributor+ Stored XSS
Slug
easy-facebook-likebox
Published
2024-03-25
Title
Easy Social Feed < 6.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via fb_appid
Slug
easy-facebook-likebox
Published
2024-03-29
Title
Easy Social Feed < 6.5.7 - Cross-Site Request Forgery
Slug
easy-facebook-likebox
Published
2025-09-05
Title
Easy Social Feed – Social Photos Gallery – Post Feed – Like Box < 6.6.8 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Slug
easy-facebook-likebox
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
easy-facebook-likebox-premium
Published
2021-08-12
Title
Easy Social Feed < 6.2.7 - Reflected Cross-Site Scripting
Slug
easy-facebook-likebox-premium
Published
2024-12-03
Title
Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library
Slug
easy-fancybox
Published
2019-09-25
Title
Easy Fancybox < 1.8.18 - Authenticated Stored XSS
Slug
easy-fancybox
Published
2024-10-24
Title
Firelight Lightbox < 2.3.4 - Authenticated (Author+) Stored Cross-Site Scripting